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VIA E-MAIL 

Brian Frosh, Attorney General 
Office of the Attorney General 
Attn: Security Breach Notification 
200 St. Paul Place 
Baltimore, MD 21202 
Email: idtheft@oag.state.md.us 

Re: Notification of Data Security Incident 

Dear Attorney General Frosh: 

I represent Conn Maciel Carey LLP (“CMC”), located in Washington, D.C. This letter is being sent 
pursuant to Md. Code Ann., Com. Law §§ 14-3501 to 14-3508, because on May 23, 2018, CMC learned that 
an unauthorized individual may have accessed personal information of one (1) Maryland resident. The 
information involved in the incident included the resident’s name and medical information. 

On or about March 23, 2018, CMC discovered that the email account of one of its employees had 
been accessed without authorization by an unknown individual. Upon learning of the incident, CMC changed 
its network credentials, shut down and unplugged the employee’s computer from the network, and began an 
investigation. Through its investigation, CMC learned on May 23, 2018 that some of the Maryland resident’s 
personal information was contained within the email account that was accessed by the unauthorized 
individual. 

CMC is in the process of notifying the affected Maryland resident via the attached letter, and is 
providing twelve (12) months of complimentary credit and identity monitoring services to the affected 
resident through Kroll. Please contact me should you have any questions. 


Very truly yours, 



Elizabeth Dill of 

LEWIS BRISBOIS BISGAARD & SMITH LLP 


Enclosure: Consumer Notification Letter 
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